database-query-and-export
Audited by Socket on Mar 1, 2026
1 alert found:
SecurityThis skill is a legitimate set of instructions and example code for querying SQLite, PostgreSQL, and MySQL and exporting results. It does not contain hidden backdoors, remote exfiltration endpoints, or download-execute patterns. Security risks are typical for database tooling: credential exposure (especially when using command-line passwords), potential SQL injection if untrusted input is passed directly into query strings, and server-side file writes via MySQL INTO OUTFILE which can be abused if queries are not constrained. Mitigations: prefer parameterized queries, avoid passing passwords on command line, restrict output paths and file permissions, run with least privilege, and validate/authorize queries before execution. Overall there is no sign of intentional malicious code in the provided fragment, but there are moderate operational security risks if used carelessly or by an untrusted agent.